As online scams skyrocket, new Mac malware emerges; can steal your money
iOS VPN App
In the last few months, India has seen a surge in online scams and other forms of related cyber crimes. In a recent incident, a Mumbai man lost Rs. 2.65 lakh after he fell for an online scam while ordering sweets, as per a report. Last year, actress Shubhangi Atre also fell victim to a similar scam and lost Rs. 2.24 lakh. These incidents highlight the fact that nobody is safe from these cyber criminals and something as innocent as buying sweets can also trap you into losing your life’s savings. At a time like this, a new dangerous Mac malware, dubbed ShadowVault, has emerged that can steal your sensitive data. To make matters worse, some bad actors are also distributing it among cybercriminals for a monthly fee of $500.
What is ShadowVault malware?
ShadowVault is an infostealer malware that targets vulnerable and unsecured MacBooks, as per a report by Tom’s Guide. Guardz, a security research firm, first found this malware in a dark web forum frequented by cyber criminals who are looking for new malware. Explaining how the malware works, the firm wrote in a blog post, “ShadowVault silently works in the background of compromised macOS devices, picking up all sorts of valuable information such as login IDs, financial data, personally identifiable information, and more”.
The malware is also capable of stealing passwords, credit card information, cookies, and more from different browsers as well.
Malware distribution model
What makes this malware more dangerous is that instead of one group of hackers making it and using it, ShadowVault is being distributed to other cybercriminals who are in need of new malware to steal from innocent people. As per the report, cybercriminals are being charged $500 (roughly Rs. 41,000) per month to get access to this malware.
Rising online scams that you should know about
ShadowVault is merely one among many such malware and other phishing tricks that scammers make use of to steal money from unsuspecting victims. While this malware-based attack does not actually approach the victim in person, there are online scammers that do and dupe people into parting with their money. These scams can be as dangerous as any.
